EduMall vulnerabilities

3 known CVE vulnerabilities in EduMall, translated and rated.

CVE-2026-39748High
A vulnerability in the EduMall theme up to version 4.5.3 allows an unauthenticated attacker to perform cross-site scripting (XSS).
CVE-2026-57797Medium
The EduMall WordPress plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects versions up to and including 4.5.1.
CVE-2025-59564High
The EduMall theme by ThemeMove has a PHP Local File Inclusion vulnerability due to improper filename control in include/require statements. Affects versions up to 4.4.5 (exclusive).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS